AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions and listings of claims in the 

application. 

COMPLETE LISTING OF THE CLAIMS : 

Claims 1-16 : (Canceled) 

Claim 1 7 : (Previously Presented) A method of enabling authorized 

access to an application server on a network, comprising the steps of: 

a) requesting authentication over the network, and requesting access to 
the application server for a predetermined time period; 

b) printing encoded, machine-readable indicia having parts of different 
light reflectivity which identify an authenticated user and the predetermined time period on a 
portable, physical ticket in response to the requesting step; and 

c) presenting the physical ticket to a reader for electro-optically reading 
the indicia to gain access to the application server on the network only for said predetermined time 
period. 

Claim 1 8 : (Previously Presented) The method of claim 1 7, wherein 

the requesting step is performed by sending an electronic request to an authentication server on the 
network. 

Claim 1 9 : (Previously Presented) The method of claim 1 7, wherein 

the printing is performed on a disposable medium. 

Claim 20 : (Previously Presented) The method of claim 1 7, wherein 

the printing is performed by printing a two-dimensional bar code symbol. 
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Claim 21 : (Previously Presented) The method of claim 17, and 
further comprising situating the network in a public venue. 

Claim 22 : (Previously Presented) A method of enabling authorized 

access to a network, the method comprising the steps of: 

a) requesting and receiving from a key distribution center over the 
network an electronic ticket signal identifying a user, an application server to be accessed on the 
network, and a predetermined time period for accessing the application server; 

b) printing encoded, machine-readable indicia having parts of different 
light reflectivity which identify the user, the application server to be accessed, and the predetermined 
time period on a portable, physical ticket based on receipt of the electronic ticket signal; and 

c) presenting the physical ticket to a reader for electro-optically reading 
the indicia to obtain from the indicia, data for identifying the user, the application server and the 
predetermined time period, to authorize the identified user to access the network and the identified 
application server only for the predetermined time period. 

Claim 23 : (Previously Presented) The method of claim 22, wherein 

the key distribution center includes an authentication server and a ticket granting server, and wherein 
the requesting and receiving steps are performed by initially sending a request to the authentication 
server for access to the ticket granting server, by thereupon receiving a response containing a session 
key encrypted with a ticket server key, by thereupon sending a subsequent request to the ticket 
granting server for access to the application server, and by subsequently receiving the electronic 
ticket signal from the ticket granting server. 
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Claim 24 : (Currently Amended) An arrangement for enabling 

authorized access to a network, comprising: 

a) an authentication center for authorizing access to an application server 
by receiving an authentication authorization request for a predetermined time period from a user, and 
by responding with an electronic ticket signal; 

b) a printer responsive to the electronic ticket signal for printing encoded, 
machine-readable indicia having parts of different light reflectivity which identify the user, an 
application server to be accessed, and the predetermined time period for accessing the application 
server on a portable, physical ticket; and 

c) a reader for electro-optically reading the indicia to authorize the 
identified user to access the identified application server only for said predetermined time period. 

Claim 25 : (Previously Presented) The arrangement of claim 24, 

wherein the ticket is a printed disposable sheet. 

Claim 26 : (Previously Presented) The arrangement of claim 24, 

wherein the indicia is a two-dimensional bar code symbol. 

Claim 27 : (Previously Presented) The arrangement of claim 26, 

wherein the symbol is PDF-417. 

Claim 28 : (Previously Presented) The arrangement of claim 24, 

wherein the network is located in a public venue. 

Claim 29 : (Previously Presented) The arrangement of claim 24, 

wherein the network is a wireless local area network. 



-4- 



